Skip to content

Commit a6c4cfb

Browse files
authored
control-service: remove executables from secure job builder (#1202)
* control-service: delete system commands after job building * control-service: delete system commands after job building * control-service: rename commands to executables
1 parent 2463adc commit a6c4cfb

2 files changed

Lines changed: 5 additions & 0 deletions

File tree

projects/control-service/projects/job-base-image/publish-job-base.sh

100755100644
File mode changed.

projects/control-service/projects/job-builder-secure/Dockerfile.python.vdk

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,4 +32,9 @@ ARG job_githash
3232
ENV JOB_NAME $job_name
3333
ENV VDK_JOB_GITHASH $job_githash
3434

35+
# Delete system executables
36+
RUN rm /bin/chown
37+
RUN rm /bin/uname
38+
RUN python -m pip uninstall pip -y
39+
3540
USER $UID

0 commit comments

Comments
 (0)